Site hardening : WP_Config Debug setting

Bug
1

Hi,

When I go to the site - Site Hardening - I tells me the WPConfig could be improved and I am failing WP Config debugging is disabled

Looking at my WP_Config file I see

define( ‘WP_DEBUG_DISPLAY’, false );
define( ‘WP_DEBUG_LOG’, true );

As such Debugging is disabled.

In order to get a pass for WP Config debugging is disabled setting I need to change this to:

define( ‘WP_DEBUG_DISPLAY’, false );
define( ‘WP_DEBUG_LOG’, false );

By default WordPress (at least on my provider) installes with WP_DEBUG_LOG = true

As this requires manual fixing, and I have over 60 sites i want to bring into WPMain, I am keen to resolve whether it flagging WP_DEBUG_LOG as an issue is by design or a mistake.

I’m running version 5.3.3 I note there may have been a similar issue in version 4.3

Thanks

1 Like
2

Hey @outsourcedit

Thanks for reporting this to us.

We’ve looked into this further, and right now, we check if WP_DEBUG and WP_DEBUG_LOG are disabled.
So in your case, since WP_DEBUG_LOG is enabled, the Site Hardening is reporting that the debugging is enabled.

We will be changing this in a future release to only check for WP_DEBUG.

In the meantime, you can safely ignore this Site Hardening recommendation, or manually set WP_DEBUG_LOG to false in wp-config.php of those sites.